Differential D1067
Create an ops group with full sudo capability Authored by dereckson on Oct 19 2017, 16:47. Tags None Referenced Files
Subscribers None
Details The 'ops' group contains operations squad members with root access The GID is keep in sync with Woods Cloud groups configuration. This will allow to drop the kludge to restore a wheel group, Ref T1034. sudo whoami
Diff Detail
Event TimelineComment Actions @Sandlayth As Salt master isn't available, could you put the roles/core/sudo/files/ops file in /etc/sudoers.d/ops %wheel ALL = (ALL) NOPASSWD: ALL I'll then do the deployment through salt-call. Comment Actions Salt master $ salt eglide state.apply roles/shellserver/users … ---------- ID: group_ops Function: group.present Name: ops Result: True Comment: New group ops created Started: 00:56:24.790152 Duration: 835.725 ms Changes: ---------- gid: 3001 members: - dereckson - sandlayth name: ops passwd: x … $ salt eglide state.apply roles/core/sudo eglide: ---------- ID: /etc/sudoers.d/ops Function: file.managed Result: True Comment: File /etc/sudoers.d/ops updated Started: 01:27:44.142002 Duration: 217.149 ms Changes: ---------- diff: New file mode: 0644 Summary for eglide ------------ Succeeded: 1 (changed=1) Failed: 0 ------------ Total states run: 1 Total run time: 217.149 ms Eglide $ id uid=5001(dereckson) gid=5001(dereckson) groups=5001(dereckson),0(wheel),200(shell),828(deployment),829(nasqueron-irc),3001(ops) $ sudo whoami root $ sudo salt-call --local test.ping local: True |